Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File:                     kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier:          8h+XOkjzVrva7YrOcPoxHoQfeoXPgiINaW4YC75iYPE=
Subject key identifier:   6E:AF:0A:AE:15:40:2C:48:3F:6D:0C:D7:7E:F7:FE:EE:E9:7D:3A:92
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer:       /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial:       01988EEC097602D65982E36F654CAF799A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number:          0930
Signing time:             Sat 09 Aug 2025 13:01:30 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:30 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:30 +0000
Files and hashes:         1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: lesE2mf13f3Rbiw/WxRp9CXA94QDLJrRdFq5PLv98lw=)
                          2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:09:76:02:d6:59:82:e3:6f:65:4c:af:79:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
        Validity
            Not Before: Aug  9 13:01:30 2025 GMT
            Not After : Aug 10 13:01:30 2025 GMT
        Subject: CN=6eaf0aae15402c483f6d0cd77ef7feeee97d3a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:2f:ab:d6:80:82:5d:87:26:d9:67:94:a8:
                    cd:b7:4e:6c:86:e3:4a:f1:31:fe:ca:bc:7f:5e:e3:
                    cf:fe:2c:a3:b0:4c:32:c3:06:63:33:b7:23:b3:7c:
                    98:69:89:ff:8d:1d:f2:a4:30:a2:12:b6:b8:1f:c5:
                    29:51:b5:db:e1:03:69:63:ac:38:67:b9:b6:86:83:
                    0c:ae:74:28:9b:63:41:dc:ca:b2:19:a7:f5:46:8b:
                    26:82:b7:2f:f4:b9:58:b1:b8:d3:1b:66:4f:4b:7c:
                    14:34:d5:c6:1d:70:9d:34:63:94:25:4a:a8:e1:15:
                    95:f1:10:55:23:c3:48:66:c3:4f:4c:46:84:97:88:
                    54:2f:2a:2a:ca:26:7f:e5:07:5d:6f:41:d4:54:de:
                    bb:a0:ce:b3:c7:95:61:07:cf:5e:00:4e:79:26:31:
                    eb:f9:c3:37:77:11:26:7c:8c:82:d6:72:79:60:93:
                    f9:c8:fd:ac:71:f2:87:90:65:0c:a6:2c:36:0b:eb:
                    07:21:c2:78:a1:dc:98:8f:56:e7:d6:b3:ae:19:44:
                    ad:89:f7:0e:d8:67:5d:83:cd:73:5f:ae:eb:d0:77:
                    4c:ca:79:a0:fd:74:71:d1:47:c1:3e:15:96:b1:14:
                    3a:47:52:4b:5c:37:77:d0:8c:7f:14:de:38:4e:85:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:0A:AE:15:40:2C:48:3F:6D:0C:D7:7E:F7:FE:EE:E9:7D:3A:92
            X509v3 Authority Key Identifier:
                keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:31:47:a9:3e:bb:c3:5c:ac:2d:3d:f4:fa:5d:fb:a2:33:d3:
         85:87:da:ce:8c:70:38:f8:e5:14:6f:a2:8f:94:56:c3:08:0e:
         c0:75:81:5f:3d:6c:be:8e:5e:d4:da:33:6e:a1:a5:f3:8b:55:
         05:15:dc:4d:c0:fd:01:7c:26:49:e0:f1:7c:ea:ea:bd:c2:ad:
         96:8d:68:e7:f5:0b:eb:78:22:5f:5b:3b:6c:a3:e3:9f:43:ab:
         28:1a:03:63:2e:08:db:ce:f6:8d:a8:05:1b:f7:9a:00:8a:60:
         16:15:ab:e4:1b:3c:05:fa:a9:e5:16:78:05:43:11:29:b6:aa:
         a6:29:42:e3:ec:9e:82:76:26:0a:8e:3e:7c:cb:0a:e4:44:bf:
         e8:57:10:96:ba:ed:20:55:1a:3b:a9:f1:d7:65:dd:d7:5d:e4:
         33:03:de:72:d7:97:a5:af:a0:04:46:c9:01:64:26:65:95:b8:
         b0:26:24:8d:0e:f8:09:ad:c0:e2:58:fc:ee:52:a7:d0:df:97:
         ec:10:75:b5:e2:46:ac:d4:ce:97:63:49:8b:23:40:3d:e4:47:
         18:c4:1a:de:d4:52:12:38:51:3f:22:dd:45:c7:13:d6:ca:c1:
         a7:0c:d0:81:28:14:6a:60:7b:3f:2e:5c:5f:9c:ee:6d:f3:46:
         2a:aa:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:47 2025 by rpki-client